CVE-2022-31454

MEDIUM · CVSS 6.1 EPSS 0.40%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2023-07-28 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2022-31454

Severity

MEDIUM

CVSS

6.1

EPSS

0.40%

Original NVD Description

Yii 2 v2.0.45 was discovered to contain a cross-site scripting (XSS) vulnerability via the endpoint /books. NOTE: this is disputed by the vendor because the cve-2022-31454-8e8555c31fd3 page does not describe why /books has a relationship to Yii 2.